-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Francis Kayiwa wrote: > If you patched already that's cool, if not you should be asking > yourself why you aren't using SSL? -oh wait. As you were. ;-) GnuTLS is another suite for doing https and so on, but AFAIK didn't suffer from this bug because it was an implementation bug rather than a general design flaw. Hope that informs, - -- MJ Ray (slef), member of www.software.coop, a for-more-than-profit co-op http://koha-community.org supporter, web and library systems developer. In My Opinion Only: see http://mjr.towers.org.uk/email.html Available for hire (including development) at http://www.software.coop/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Icedove - http://www.enigmail.net/ iQIcBAEBCAAGBQJTS9QYAAoJELJrzKUj/txjqdoP/1mfclQN7uZgs4aQWS5FZ197 6W93lFuwi15nNkPPopx/5l9m4Cpo+scPDhf0N0L0rKHeiggoHKy4mXUs+TIFoW1S SoX8sPsCPRwTpozbJhk98iCXCGZZGd7vJnkZcNce0DeodfP7p/mYTwt79HmwD9co pFvHhcn/PN/ecIcdEXBRC8SVPMJNpF3srD2AZvX74jKEo+LuekSWV4wUaAZhHmo6 l6/Ll7htRZoQ9wT/ZeAlzBLGd9wQm+tLbweubLR5DPDZ9xFCbmlZ4JOjRddY2WbC ppfosIP8BCuTg1ff/K6llez2S4PZ7aO5RMsg/Cb8WEp749VTY2eUmI1vzWAjCK7t 7dVu25oL/uUZxX/uuWqfho7XYfisPgnKW3lvV8SkyzRRsaQkSUGs8IFUqmsE55wA zJNOYewXzlbLkDY7uhvnIbSVtqqOhtpMmOUk8V7PWhkPWQ09lupVBJxEBqYL687t OpJ8x+4ga/uyQFKmSVlpp4GtmfcylfNr3aomxjG1iksotkeczHr3M0x9v9UxaXsj YrrWikkeUWWKHwhs42ZF2a0FbdvM1d1fDmqvDsPuMGsSgeNw9iz+BAJsPqNMpfcF RUIf4Vu/Hcj7c80j1+HRJ/zZkztGV6uXNpApQ4DoEiujjLArg1kAFtoKzKeX5BDi rJ6bcLBMxqirYOKH9ETE =Edt0 -----END PGP SIGNATURE-----